Spoofing canvas and webgl

speedyallan77 said:
multi login is already bypassing this then how?
they are multi profile browser too.

botting google is not that hard especially for views.
i already have my own solution for this.
each viewer watches video from isolated browser environment with no fingerprint leaks.
like vm with unique fingerprints.

u add random Human activity with aged Google accounts.
that way even normal quality proxies work.

the reason why most botting method fails is coz the method sucks. not coz of proxies.

if proxies are the problem then my normal account Should be banned when i access from vpn.
but i dont get banned coz there is human activity.

my team already has bot that bypasses Google for views.

but that bot is only for views im looking for a good solution for multi account management besides vps or vms.


what do u think about vms?
will there still be some leak?
something that i need to look into?
Click to expand...
Go0gle is able to detect you are using vm when you use gg chrome.
Multilogin is enough for your need, as it provide consistent fingerprints llike from real devices
 
Advertise on BHW
You can try INCOGNITON it's a multilogin tool the seller is a BHW member, and it's free for 10 profiles
 
MarkWilson said:
Just a quick update guys
tested on iPhone for some time now, not worth it.
don't have time right now to go in details, it is just not worth the cost and the lack of scalability and reliability.

My current config in playwright is able to pass distil and often also recaptcha, but still 0 success with Datadome. I can navigate to the site but after 2-3 clicks I get instant blocked, even by making hotspot with my phone (just in case problem was some proxies leak)
Has anyone figured out how to beat these guys?
it's becoming something personal
Click to expand...
Hello,

could you DM me about datadome bypass ? Working on one too and i'm quite close to getting it, just need a few answers ! .paul#7172 or directly via dm
 
You can totally eliminate fingerprints by using something like Pullovers Macro Creator
The problem with browsers like Selenium is that they were never designed for stealth. TSL (Test Script Language) was designed for load testing servers or applications by lazy engineers. They have finger prints because that's how the metrics software tracked performance... Scorpion & the frog.
Purist of TSL will tell you Macro script like AutoHotKey are none contact. No injection into the browser code.
You can scale up using VMware which is free as well.
Use decent proxies and you will never be detected.
 
ATuringtest said:
You can totally eliminate fingerprints by using something like Pullovers Macro Creator
The problem with browsers like Selenium is that they were never designed for stealth. TSL (Test Script Language) was designed for load testing servers or applications by lazy engineers. They have finger prints because that's how the metrics software tracked performance... Scorpion & the frog.
Purist of TSL will tell you Macro script like AutoHotKey are none contact. No injection into the browser code.
You can scale up using VMware which is free as well.
Use decent proxies and you will never be detected.
Click to expand...
Yep, very true.
But you still have to find a way to cover your tracks by changing your browser's footprints if your goal is to create accounts for example.
 
M4DM4X said:
Yep, very true.
But you still have to find a way to cover your tracks by changing your browser's footprints if your goal is to create accounts for example.
Click to expand...
Not if you start a fresh instance of chrome everytime.. again easy to do with AHK
You can copy out the cookies then import them back in when you re use an account... again easy to do with AHK
 
ATuringtest said:
Not if you start a fresh instance of chrome everytime.. again easy to do with AHK
You can copy out the cookies then import them back in when you re use an account... again easy to do with AHK
Click to expand...
fingerprints reaches far more deeper than just what is happening in browser relating to cookies and storage.

to successfully and fully evade fingerprinting, you need to change your video rendering device

that is why nothing beats mobile in account creation
 
lucky.sparks said:
fingerprints reaches far more deeper than just what is happening in browser relating to cookies and storage.

to successfully and fully evade fingerprinting, you need to change your video rendering device

that is why nothing beats mobile in account creation
Click to expand...
You can do that with VMware - Macro miners have been doing this for years.

https://www.macrolab-online.com/knowledgebase/index.htm > farming tutorial > VMware setup
 
ATuringtest said:
You can do that with VMware - Macro miners have been doing this for years.

https://www.macrolab-online.com/knowledgebase/index.htm > farming tutorial > VMware setup
Click to expand...
No, you can't change your graphic engine by that, the canvas/webgl render output will stay the same as it still uses hosts graphics.

Again, these fingerprinting techniques uses HARDWARE to determine same devices, thus my advice for mobile phones as there it's a norm to have same vendor hardware so fingerprinting mobile devices have less sense than desktop machines.

And even if you could change that by using vmware, scalability by such a setup would be close to none, good luck creating 1000 Instagram accounts by using vmware.
 
lucky.sparks said:
No, you can't change your graphic engine by that, the canvas/webgl render output will stay the same as it still uses hosts graphics.

Again, these fingerprinting techniques uses HARDWARE to determine same devices, thus my advice for mobile phones as there it's a norm to have same vendor hardware so fingerprinting mobile devices have less sense than desktop machines.

And even if you could change that by using vmware, scalability by such a setup would be close to none, good luck creating 1000 Instagram accounts by using vmware.
Click to expand...
You create a vanilla copy of win10 virtual machine.
Snapshot the machine at the point before the macro creates creates the account.
Export the cookies and the VM settings file to a shared folder/drive.
Then roll back the VM instance to the vanilla.
Rinse repeat.
You can use the VM manager tool from MacroLab's to auto run 10 vm's at a time.
 
Well it depends on the platform you create the accounts on.
I used to bot on virtualbox machines to create adwords accounts and I can tell you it's not enough to start a fresh copy of chrome, nor a new VM. You have to change you hardware fingerprint too, which is very complicated and doesn't work 100%.
For some platforms like reddit though you don't need to take such precautions, it really depends on your goal.
 
Depends on platform. most of the platforms and forums these days are detecting duplicate users based on Hardware , timezone and other fingerprints. you can easily get detected with Virtual machines / Fresh browser profiles if dealing with challenging system.

IP is not a factor since long time ago but it's good in any case that your information is required by a third-party agency
 
M4DM4X said:
Well it depends on the platform you create the accounts on.
I used to bot on virtualbox machines to create adwords accounts and I can tell you it's not enough to start a fresh copy of chrome, nor a new VM. You have to change you hardware fingerprint too, which is very complicated and doesn't work 100%.
For some platforms like reddit though you don't need to take such precautions, it really depends on your goal.
Click to expand...
You don't need it for reddit? I would have thought you would, maybe i'm thinking too much about it? Do you know specifically what things reddit DOES look for? Or the best way to figure that out for myself? I've been trying to figure out a more reliable solution than me forking out money for incogniton (though it's worked great, i'm broke currently lol)

I've been thinking just getting some spoofing browser plugins to at least mask it?
 
PythonNoob69 said:
You don't need it for reddit? I would have thought you would, maybe i'm thinking too much about it? Do you know specifically what things reddit DOES look for? Or the best way to figure that out for myself? I've been trying to figure out a more reliable solution than me forking out money for incogniton (though it's worked great, i'm broke currently lol)

I've been thinking just getting some spoofing browser plugins to at least mask it?
Click to expand...
Back in time (a year ago) when I was creating accs on reddit it was enough to change ip, delete cookies, and spoof the user agent.
Same for upvoting posts.
I don't know if it's still as simple today.
 
M4DM4X said:
Back in time (a year ago) when I was creating accs on reddit it was enough to change ip, delete cookies, and spoof the user agent.
Same for upvoting posts.
I don't know if it's still as simple today.
Click to expand...
Ah, fair enough, i've been using incogniton for my browsers while doing my testing and coding functionality, but I don't even know what reddit actually detects, i'm going to be doing a bunch of things differently, using gmail accounts instead of temp emails, my own selenium browsers with profiles etc just need to figure out how to create and use the profiles properly, doesn't seem to be much in the way of tutorials for that specifically, that work anyway.


This was all about 6-7 months or so ago? But for the most part, unless I did something stupid while testing code, or it broke during long operations, most of my accounts were fine, I was just curious if I was thinking about it too much. Then again, I guess when it comes to this, there's no such thing as "too careful" haha
 
PythonNoob69 said:
Ah, fair enough, i've been using incogniton for my browsers while doing my testing and coding functionality, but I don't even know what reddit actually detects, i'm going to be doing a bunch of things differently, using gmail accounts instead of temp emails, my own selenium browsers with profiles etc just need to figure out how to create and use the profiles properly, doesn't seem to be much in the way of tutorials for that specifically, that work anyway.


This was all about 6-7 months or so ago? But for the most part, unless I did something stupid while testing code, or it broke during long operations, most of my accounts were fine, I was just curious if I was thinking about it too much. Then again, I guess when it comes to this, there's no such thing as "too careful" haha
Click to expand...
You can type whatever email you want they don't even require a verification to be able to post on reddit.
The biggest problem on reddit is people flagging your posts at the speed of light, so better spend some time to elaborate a method to fly under the radar, instead of coding a complicated bot :)
 
lucky.sparks said:
No, you can't change your graphic engine by that, the canvas/webgl render output will stay the same as it still uses hosts graphics.

Again, these fingerprinting techniques uses HARDWARE to determine same devices, thus my advice for mobile phones as there it's a norm to have same vendor hardware so fingerprinting mobile devices have less sense than desktop machines.

And even if you could change that by using vmware, scalability by such a setup would be close to none, good luck creating 1000 Instagram accounts by using vmware.
Click to expand...
So you're saying that is more optimized to spoof a Chrome Mobile fingerprint on Puppeteer than a Chrome Desktop fingerprint ?
 
Neetoo said:
So you're saying that is more optimized to spoof a Chrome Mobile fingerprint on Puppeteer than a Chrome Desktop fingerprint ?
Click to expand...
No.

- Same mobile devices uses same hardware.
- Same hardware, same fingerprints.
- If all fingerprints are same, no need to spoof them.
 
lucky.sparks said:
No.

- Same mobile devices uses same hardware.
- Same hardware, same fingerprints.
- If all fingerprints are same, no need to spoof them.
Click to expand...
Ok I see, and for Social Media creation, you spoof fingerprint with Puppeteer ?
Or you're using a customized browser ?
 
Advertise on BHW
You must log in or register to reply here.
Sign up now!

Main Menu

Home Main Forum List Black Hat SEO White Hat SEO BHW Newbie Guide Blogging Black Hat Tools Social Media Downloads

Marketplace

Account Selling Content / Copywriting EBooks / Methods Hosting Misc Proxies For Sale SEO - Link building SEO - Packages Social Media Social Media - Panels Web Design More

Making Money

Affiliate Programs Hire a Freelancer IM Journeys Making Money Pay Per Click Site Flipping Want to Buy

BlackHat World

Dispute Resolution Forum Suggestions & Feedback Introductions Lounge
Back
Top